kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 29, 2021 | Jul 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Sep 29, 2021 | Jul 7, 2021 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-preemptUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-preemptUpgrade dtb-allwinnerUpgrade kselftests-kmp-preemptUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade reiserfs-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade dtb-alUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade dtb-zteUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-preempt-extraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-preempt-optional | Jul 23, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-aws-5.11Upgrade linux-azure-5.11Upgrade linux-oracle-5.11Upgrade linux-gcp-5.11Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-gcp-fips | Nov 19, 2024 | Jul 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub